Cisco Unified Ip Phone 8961, 9951, And 9971 Administration Guide For Cisco Unified Communications Manager - Cisco 9971 Administration Manual

Set Up Cisco VXC VPN
Table 31: Cisco VXC VPN Fields
Parameter Name
Enable VXC VPN for MAC
VXC VPN Option

Cisco Unified IP Phone 8961, 9951, and 9971 Administration Guide for Cisco Unified Communications Manager

10.0
256
Parameter Description
This field enables or disables the Cisco VXC VPN feature. When you
populate this field, the phone allows traffic from the device with the
specified MAC address and that connects to the phone PC Port to access
the tunnel.
• When this field is blank, the phone does not establish a Cisco VXC
VPN tunnel.
• When this field specifies one broadcast MAC address
(FFFFFFFFFFFF), the phone establishes the Cisco VXC VPN tunnel
and allows any connected Cisco VXC 2111/2112 device to access
the tunnel.
• When this field specifies one nonbroadcast MAC address, the phone
establishes the Cisco VXC VPN tunnel and allows only the Cisco
VXC device with the specified MAC address to access the tunnel.
By default, this field is blank.
This field indicates the type of VXC VPN support.
• Dual Tunnel: The phone establishes two VPN tunnels, one for the
phone and another for the Cisco VXC device.
To ensure the highest quality of service for the phone voice and video
services, Cisco recommends the Dual Tunnel setting, which is the
default setting. With two VPN tunnels, the host Cisco Unified IP
Phone can provide prioritization of CPU and memory resources to
the data that associates with the phone voice and with video functions
over the data that associates with the Cisco VXC VPN tunnel. This
approach requires two manual login entries, depending on security
parameters: one for the phone VPN and another for the Cisco VXC
VPN. The two-tunnel approach also requires two VPN concentrator
ports and two IP addresses.
• Single Tunnel: The phone establishes only one VPN tunnel for the
phone and the Cisco VXC device to share.
For customers who are willing to trade off potential voice and video
quality for a simplified operating model, the single VPN tunnel option
is available. All data travels over a single VPN tunnel by sharing the
available phone processor and memory resources across the voice,
video, and Cisco VXC services. The IP phone does not prioritize data
handing of one service over another. As a result, possible performance
degradation of the IP phone voice and video media handling and UI
functions may occur due to IP phone CPU loading.
Default: Dual Tunnel